$ rpki-client -vvf rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/C3290D00636F11F0A1C6DA70C4F9AE02.roa File: C3290D00636F11F0A1C6DA70C4F9AE02.roa (raw, json) Hash identifier: I8QsExkkx/lQXZrUI8Q7vR9Vux4YkSdHgTIl8y+WbMk= Subject key identifier: B7:F9:46:09:9A:23:CD:95:E3:F0:AB:1B:71:7C:E0:BF:3C:87:C6:38 Certificate issuer: /CN=A9158E3F/serialNumber=7E313AB7FF26E783E03C07851612751881AE4918 Certificate serial: 0CB9 Authority key identifier: 7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/C3290D00636F11F0A1C6DA70C4F9AE02.roa Signing time: Mon 02 Mar 2026 13:27:43 +0000 ROA not before: Sat 16 Aug 2025 19:30:05 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 17819 IP address blocks: 119.27.0.0/24 maxlen: 24 119.27.1.0/24 maxlen: 24 180.189.8.0/21 maxlen: 21 183.177.0.0/20 maxlen: 20 202.167.226.0/24 maxlen: 24 202.167.236.0/22 maxlen: 22 202.167.243.0/24 maxlen: 24 202.167.255.0/24 maxlen: 24 203.190.224.0/23 maxlen: 23 203.190.224.0/24 maxlen: 24 203.190.226.0/24 maxlen: 24 2407:b000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:02:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3257 (0xcb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158E3F, serialNumber=7E313AB7FF26E783E03C07851612751881AE4918 Validity Not Before: Aug 16 19:30:05 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a5904e-43fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:4f:84:31:bd:9d:ab:b3:a9:f3:66:99:c0:89: bb:c0:81:6a:81:91:e3:5f:59:d4:29:0a:8f:81:ec: b0:09:d0:22:46:ec:d7:98:d3:c0:6b:77:17:ff:84: 96:ee:95:71:ec:9a:0d:74:e2:9a:65:10:70:71:18: 5b:5b:8a:88:8b:4d:9b:d7:bd:cb:7d:b7:70:07:03: de:d0:78:a6:f9:48:ec:25:41:cd:0e:d5:fc:e9:95: c4:79:7f:3a:cb:59:79:7c:c0:81:ae:50:e0:ca:6e: ed:84:7c:e0:87:1a:02:0a:49:50:d3:e3:c3:8c:7b: 14:02:28:44:d4:5b:88:86:3d:ce:e7:49:a7:87:b0: a8:32:b7:7b:af:af:c0:a1:3d:06:60:15:59:92:ed: 35:af:ee:98:37:46:53:b0:55:f9:e2:30:e9:3e:39: f5:6a:62:8d:29:24:33:a1:2c:ac:65:f9:6e:b4:b8: c1:45:45:f1:d0:3a:9a:50:e5:ad:25:07:3f:ae:e7: dc:fb:ea:4a:02:d5:cc:9a:40:ff:85:44:6c:fd:ba: 99:64:20:00:d9:2b:98:1e:6a:20:fa:b9:65:a6:48: e5:05:9a:38:d0:ac:9f:ff:f8:5f:0f:36:f4:ab:c6: 72:28:1c:a3:52:67:57:df:5d:6d:78:2f:28:bd:98: cb:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:F9:46:09:9A:23:CD:95:E3:F0:AB:1B:71:7C:E0:BF:3C:87:C6:38 X509v3 Authority Key Identifier: keyid:7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/C3290D00636F11F0A1C6DA70C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 119.27.0.0/23 180.189.8.0/21 183.177.0.0/20 202.167.226.0/24 202.167.236.0/22 202.167.243.0/24 202.167.255.0/24 203.190.224.0-203.190.226.255 IPv6: 2407:b000::/33 Signature Algorithm: sha256WithRSAEncryption ad:60:84:cc:3c:48:b8:21:54:70:b3:9a:fd:0c:ac:89:bb:f0: 2b:17:b9:2a:7f:e4:36:71:d1:6e:15:bd:09:30:65:f7:4b:21: 98:21:f7:0e:87:b5:b9:44:d5:0b:31:62:2f:82:73:aa:b3:49: ba:20:6c:aa:57:52:c7:78:60:4a:ad:97:6d:6d:53:cd:23:97: 82:5f:1e:12:c2:07:30:da:82:e5:f2:ea:e3:17:77:00:09:eb: 03:49:af:46:38:ad:dd:c2:a0:0d:fb:91:68:03:cc:cf:66:81: 49:88:9a:ae:cd:0a:50:20:70:d3:9b:1e:15:ea:15:68:80:2c: 67:db:8b:f0:4d:02:27:e6:ef:5a:9b:dc:5f:dd:af:7f:c1:05: f6:3a:22:66:4c:7b:e8:79:25:a9:3d:09:66:39:d1:40:c0:6a: f9:77:be:ec:5a:f6:f9:ab:75:6f:b5:30:2e:9a:13:30:84:ce: 82:f7:fb:f4:60:f6:5a:cc:13:9a:8e:e5:3d:3d:dd:6e:41:86: 98:be:8d:17:84:43:dc:e8:21:ba:16:70:6c:9a:72:6a:a0:90: 3e:af:34:74:89:fd:f5:39:a3:ee:f9:af:76:7c:39:9b:09:e7: 51:3c:0a:16:ee:16:c2:3a:65:ac:ae:44:b0:3b:29:18:96:3b: 5b:ed:56:8f -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgICDLkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThFM0YxMTAvBgNVBAUTKDdFMzEzQUI3RkYyNkU3ODNFMDNDMDc4NTE2MTI3NTE4 ODFBRTQ5MTgwHhcNMjUwODE2MTkzMDA1WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OTA0ZS00M2ZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1k+EMb2dq7Op82aZwIm7wIFqgZHjX1nUKQqPgeywCdAiRuzXmNPAa3cX/4SW 7pVx7JoNdOKaZRBwcRhbW4qIi02b173LfbdwBwPe0Him+UjsJUHNDtX86ZXEeX86 y1l5fMCBrlDgym7thHzghxoCCklQ0+PDjHsUAihE1FuIhj3O50mnh7CoMrd7r6/A oT0GYBVZku01r+6YN0ZTsFX54jDpPjn1amKNKSQzoSysZflutLjBRUXx0DqaUOWt JQc/rufc++pKAtXMmkD/hURs/bqZZCAA2SuYHmog+rllpkjlBZo40Kyf//hfDzb0 q8ZyKByjUmdX311teC8ovZjL5wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFLf5Rgma I82V4/CrG3F84L88h8Y4MB8GA1UdIwQYMBaAFH4xOrf/JueD4DwHhRYSdRiBrkkY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEUzRi9DMjQzMjJCQTU0 NDYxMUVBOEMwNTY1MURDNEY5QUUwMi9makU2dF84bTU0UGdQQWVGRmhKMUdJR3VT UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZqRTZ0XzhtNTRQZ1BBZUZGaEoxR0lHdVNSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NThFM0YvQzI0MzIyQkE1NDQ2MTFFQThDMDU2NTFEQzRGOUFFMDIvQzMyOTBEMDA2 MzZGMTFGMEExQzZEQTcwQzRGOUFFMDIucm9hMGEGCCsGAQUFBwEHAQH/BFIwUDA+ BAIAATA4AwQBdxsAAwQDtL0IAwQEt7EAAwQAyqfiAwQCyqfsAwQAyqfzAwQAyqf/ MAwDBAXLvuADBADLvuIwDgQCAAIwCAMGByQHsAAAMA0GCSqGSIb3DQEBCwUAA4IB AQCtYITMPEi4IVRws5r9DKyJu/ArF7kqf+Q2cdFuFb0JMGX3SyGYIfcOh7W5RNUL MWIvgnOqs0m6IGyqV1LHeGBKrZdtbVPNI5eCXx4Swgcw2oLl8urjF3cACesDSa9G OK3dwqAN+5FoA8zPZoFJiJquzQpQIHDTmx4V6hVogCxn24vwTQIn5u9am9xf3a9/ wQX2OiJmTHvoeSWpPQlmOdFAwGr5d77sWvb5q3VvtTAumhMwhM6C9/v0YPZazBOa juU9Pd1uQYaYvo0XhEPc6CG6FnBsmnJqoJA+rzR0if31OaPu+a92fDmbCedRPAoW 7hbCOmWsrkSwOykYljtb7VaP -----END CERTIFICATE-----Generated at Thu Mar 26 16:14:20 2026 by rpki-client